
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier: qKBhNzwSZX37NcU8lsiA4S26tsXiDGmBs1vlLd7VwXI=
Subject key identifier: B0:C9:41:C0:65:64:12:F7:6A:6F:18:1C:A6:9C:BD:42:5C:26:20:69
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number: C4
Signing time: Wed 23 Sep 2026 06:38:14 +0000
Manifest this update: Wed 23 Sep 2026 06:38:13 +0000
Manifest next update: Wed 30 Sep 2026 06:38:13 +0000
Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: 3GUTSeHFuwH26LtKTEytbrbsXQQz2T7Tw0MilnJQdBw=)
2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Sep 23 06:38:13 2026 GMT
Not After : Sep 30 06:38:13 2026 GMT
Subject: CN=6ab373d5-487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:58:71:7a:b9:63:97:d0:2b:76:fb:f0:c7:
a0:45:a0:90:3e:88:0d:9d:89:5f:ed:bf:ab:c1:60:
ab:97:08:b6:4f:ca:f9:a8:35:89:7e:0c:ef:aa:48:
70:fa:ce:86:95:79:3a:eb:28:26:b4:b4:3c:ff:7d:
47:bc:01:63:a1:58:51:ec:a9:f6:5b:59:5b:e5:69:
0c:9b:89:78:3a:30:0b:ef:22:8d:ad:98:65:fa:0e:
1e:91:53:e8:4a:17:3a:16:54:2d:81:58:ad:fa:d7:
49:35:f0:f8:7e:ff:fd:d0:47:d7:15:f8:08:5a:37:
28:e7:e3:69:4b:2c:61:38:d9:1f:7f:23:cc:4d:7f:
27:92:32:13:f8:c6:5b:35:20:4a:dd:63:01:ac:df:
94:ba:dd:5b:c9:d2:30:37:fb:49:0f:8a:87:d0:e6:
c5:7f:7e:d2:c4:3e:31:ff:5a:bc:ca:43:66:cf:15:
8b:92:f7:21:a5:5c:96:35:4e:ed:a3:9e:7d:dc:ab:
00:1d:ce:a9:5a:8d:8e:83:ba:d5:a5:fa:0f:73:5e:
cb:85:c6:02:d4:58:7a:36:e1:dd:f5:64:51:ac:80:
6d:75:39:8b:d8:e0:89:cb:93:cc:a1:12:34:80:25:
f5:bc:af:79:35:11:f6:7c:f6:c4:32:1c:a0:68:e8:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C9:41:C0:65:64:12:F7:6A:6F:18:1C:A6:9C:BD:42:5C:26:20:69
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:74:79:58:51:90:97:70:52:a6:b8:d9:d5:45:30:b2:65:
57:86:51:50:b0:aa:b2:4a:38:2b:5e:14:50:bb:c5:b7:f7:87:
91:91:de:e6:61:eb:ff:19:e3:c8:e8:97:c2:9b:8b:e3:e1:4e:
90:f9:70:42:aa:ee:68:a9:f0:f9:64:bc:73:c0:69:a6:6f:35:
a3:99:88:58:c0:66:0d:e6:ad:11:d0:e7:a2:9f:e0:89:f4:6d:
87:97:3b:fd:ad:8d:9a:76:a1:dc:63:71:c3:23:96:30:ab:da:
bb:4a:2a:6f:ec:3b:23:be:3c:f9:dc:cb:00:f4:75:80:2f:aa:
27:ab:66:a6:d9:d9:90:ef:6c:41:98:e1:b0:18:41:c5:e2:f4:
8f:25:54:34:9f:87:e5:06:9a:9f:c5:98:4f:ca:e9:b5:f9:06:
ca:8f:91:ab:32:ec:a5:e6:31:17:dd:64:08:9e:fd:f7:71:59:
39:4d:7a:d4:e2:6c:37:eb:2c:4b:5e:89:70:7b:20:2f:07:75:
cd:b9:ed:1a:45:13:4c:d4:b4:bc:16:85:65:d2:ad:cb:1a:61:
47:0a:ec:d1:94:8f:61:76:65:6a:42:e5:7a:85:6a:78:78:58:
f0:12:31:20:fc:06:68:58:3d:0c:af:3b:b9:78:fe:3e:97:4f:
77:d6:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:31 2026 by rpki-client